To improve hunt capability and mature in the Threat Hunting Maturity Model, an organization should first:

Question

Options

• AIgnore external threat intelligence
• BFocus on purchasing more security tools
• CDevelop and refine standard operating procedures
• DLimit collaboration to the cybersecurity team

• A
  21% (6)
• B
  3% (1)
• C
  69% (20)
• D
  7% (2)

Explanation

Developing and refining standard operating procedures (SOPs) is the foundation of maturing in the Threat Hunting Maturity Model because structured, repeatable processes enable teams to move from ad hoc, reactive hunting to systematic, intelligence-driven operations - without SOPs, hunts remain inconsistent and unmeasurable. A is wrong because external threat intelligence is a critical input for hypothesis-driven hunting; ignoring it keeps the team blind to known adversary TTPs. B is wrong because tool acquisition without process maturity leads to underutilized technology - mature hunting requires disciplined methodology first, tools second. D is wrong because cross-functional collaboration (with IR, red teams, and threat intel teams) is a hallmark of higher maturity levels, not something to limit.

Memory tip: Think of the maturity model like building a house - SOPs are the foundation. You can't add floors (tools, intelligence, collaboration) until the foundation is solid.

No community discussion yet for this question.